TKT_FLG_TRANSIT_POLICY_CHECKED

Luke Howard lukeh at padl.com
Tue Sep 15 14:55:00 EDT 2009


On 15/09/2009, at 8:49 PM, Sam Hartman wrote:

>>>>>> "Luke" == Luke Howard <lukeh at padl.com> writes:
> 8
>    Luke> Is there a reason we don't support the use of
>    Luke> TKT_FLG_TRANSIT_POLICY_CHECKED to bypass client-side
>    Luke> transited policy checking? (Or do we and I haven't looked
>    Luke> closely enough?)
>
> You mean app-server-side.  No, just never implemented.

Yes, I struggle with the use of the word "client". Sometimes I use it  
to mean "not KDC".

-- Luke



More information about the krbdev mailing list